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DDA 76-3746 
28 July 1976 


STATINTL 


MEMORANDUM FOR: 
FROM : 

SUBJECT : 


REFERENCE 


DDA Office Directors 


Executive Officer, DDA 

Annual Plan for Directorate of 
Administration Audits 

Memorandum for DDA from IG, dated 
27 July 1976, Same Subject 


1. The attached is forwarded for your information. 
It is based on an exchange of correspondence and conver- 
sation between and among Mr. Blake, the Inspector General 
and Chief, Audit Staff concerning expanded audits and 
their relationship to inspections. 

2. The ground rules described should be of interest 
to you. 


STATINTL 
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Distribution : 
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MEMORANDUM FOR: 
FROM : 

SUBJECT : 

REFERENCES : 


Deputy Director for Administration 

John H. Waller 
Inspector General 

Annual Plan for Directorate of Administration Audits; 
Expanded Audits and their Relationship to Inspections 

(a) Chief, Audit Staff Memorandum dated 14 July 1976 

(b) Your Memorandum (DDA 76-3259) of 30 June 1976 

(c) Annual Audit Plan dated 28 June 1976 


1. Reference (a) deferred responding to the questions raised by you 
in Reference (b) until the Chief, Audit Staff, and I were able to review 
the problems you brought to our attention, and to issue a paper which 


and which 


addresses itself to clarifying and elaborating on 

notes the principles we believe should obtain in the conduct of expanded 
audits. I am attaching for your information a copy of the paper which 
resulted from these deliberations and which I believe you will find to 
be useful. In it we have made what I believe are so me innova tive 
suggestions consistent with the letter and spirit of | l and which 

I hope will result in more substantive and meaningful audits. 


25X1 A 

25X1 A 


2. In answer to your specific question about the extension of the 
scope of audit beyond financial compliance in the audit of the Office 
of Personnel, I would like to note that this is being u ndertaken in 
accordance with the provisions of paragraph lb(2)(b) of I I Before 

commencing this audit, the auditors will thoroughly review the recent 
Inspection Staff report on the Office of Personnel. Matters covered 

during the Inspection will not be touched on by the auditors, thus 

avoiding needless duplication of effort. Also, in the spirit of | 
and in order to make the audit more meaningful, I am assigning to that 
audit one of the Inspectors who participated in the inspection of the 
Office of Personnel. You are also invited, in accordance with | 

(2)(c) and the attached paper, to designate an officer to assist the 
auditors who will be conducting this audit. 
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Attachments: 
As Stated 
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The Audit Function and the Scope of Audits in CIA ; 
Relationship to Inspections 


1. Some knowledge of the legal and administrative basis of the 
Federal Government's standards and procedures for internal auditing in 
Federal agencies is important to an understanding of the audit function 
and the scope of audit in CIA and CIA's regulation on the subject. CIA 

25X1A regulationr I (see attached) observes these standards, while at the 
same time taking into account the Agency's unique circumstances in terms 
of its operations and use of confidential funds. 

2. The Budget and Accounting Procedures Act of 1950 requires the 
head of each executive agency to conduct internal audits in accordance 
with standards established by the General Accouting Office, the auditing 
arm of Congress. These standards provided for expanded audits. Until 
recently, however, the Agency generally limited the Audit Staff to the 
performance of financial /compliance audits. The Agency's philosophy was 
to emphasize strong financial audits because of its unique responsibility 
for the expenditure of confidential funds. Agency management believed 
that disclosure of financial irregularities could jeopardize the con- 
tinuance of confidential funds authority. 


3. Since 1950, GAO has promulgated audit standards which extend 
beyond the traditional financial /compliance audit. Recently GAO and 0MB, 
the management arm of the Executive Branch, have stressed the need for 
increasing the scope of audit coverage in Federal agencies, including CIA. 
Their guidelines are contained in GAO's Standards for Audit o f _goyeQI~ 
mental Organi zations, Programs, Activities and Functions and 0MB s £edera_L 
Management Circular 73-2. CIA regulationT 13 which 1S . consistent _ _ 
with the provisions of these issuances, specifies the standards of expanded 
audits as conducted in CIA. These standards provide for a scope of audit 
that includes not only financial compliance auditing but also auditing 

for "economy and efficiency," and "achievement of desired results ; these 
latter are known as expanded audits. The concept of accountability is 
woven into the basic premises supporting the standards. 

4. These various authoritative issuances have been instrumental in 


25X1 A the writing of 


and will become more important if there is a 

___ •» ■ • ■ r r n A i 


resumption in any form of GAO external audits of CIA. 


GAO relies on the 

work of the internal auditors and the other evaluation/assessment elements 
in a Federal agency and to the extent that GAO can accept this work, it. 
limits its own reviews. 
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5. The work related to financial /compliance auditing is well known 
and includes an examination of financial transactions, accounts, and 
reports including an evaluation of compliance with applicable laws and 
regulations. This is the first element of the three elements which 
constitute a full scope audit. 

6. . In making a determination as to whether Agency resources are 
managed economically and efficiently (the second element of a full scope 
audit) the auditor, should be alert to such examples of uneconomical 
practices or inefficiencies as: 

(a) Procedures which are ineffective or more costly than 
justifiable. 

(b) Redundancy of effort by employees or between organizational 
units 

(c) Performance of work which serves little or no useful purpose 

(d) Inefficient or uneconomical use of equipment; faulty buying 
practices 

(e) Overstaffing in relation to work to be done 

(f) Wasteful use of resources 

7. The third element of a full scope audit consists of a review 
of a program or activity to determine whether the desired results and 
benefits are being achieved and whether the program or activity is 
meeting established objectives. The auditor, should consider: 

(a) The relevance and validity of the criteria used by the 
audited entity to judge effectiveness in achieving program 
results 

(b) The appropriateness of the methods followed by the entity 
to evaluate effectiveness in achieving program results 

(c) The accuracy of the data accumulated 

(d) The reliability of the results obtained 
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In other words, the auditor will not necessarily accumulate data himself 
to determine whether programs are meeting established objectives, but 
will normally only review and test those procedures and methods employed 
by line management to evaluate programs and activities. This could also 
include evaluation and review of MBO and other Agency management systems. 
It should be noted that the audit standards promulgated and adopted by 
0MB and GAO permit the auditor to accept the work of other assessment 
and evaluation groups. 


8. Under I I the Audit Staff is required to coordinate the 

selection of subject matter for an expanded audit with the Deputy Director 
concerned. Since only the DCI can exempt a program or component from audit 
(and none are presently exempt), a Deputy Director who wishes such an 
exemption would have to seek DCI approval if the Deputy Director objected 
to an audit. The Audit Staff's limited resources and commitment to 
financial /compliance audits preclude more than a few expanded audits at 
this time. Resources are limited particularly in terms of the number of 
auditors believed to have the necessary experience and background to 
conduct expanded audits. 


9. During a routine financial compliance audit, the auditors may 
uncover uneconomical practices and inefficiencies, or they may also 
discern that desired results are not being achieved. In these cases, 
the auditors would not be fulfilling their responsibilities if they did 
not explore these matters further and comment on their findings. 


10. There is an area of potential overlap between the Audit Staff 
and the Inspection Staff. The Inspector General has the responsibility 
to conduct periodic inspections of all CIA offices to determine the 
effectiveness of their programs in implementing policy objectives. This 
authority is broadly encompassing. Audit Staff's authority to determine 
whether programs are meeting established objectives and desired results 
are being achieved is oriented primarily toward testing and reviewing pro- 
cedures and methods used by line managers to evaluate use of their resources 
There is the possibility of some overlap here, but since the Inspector _ 
General monitors the work of both the Inspection and Audit Staffs > he views 
as one of his major tasks the limitation of unnecessary duplication 
between expanded audits and inspections. 


11. Serious efforts will be made to avoid duplication of audit and 
inspection effort, and to make more effective use of the limited number 
of qualified personne l available to conduct these kinds of inspections 
and audits, 
will : 


states under lb(2)(c) that the Chief, Audit Staff 
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When an audit is planned which encompasses elements of 
(extended audits) augment the audit team where necessary 
with an individual or individuals with appropriate experi- 
ence in the technical field or operational area to be 
reviewed. These individuals may be drawn from either 
the Inspection Staff, the directorate involved, retirees, 
or outside consultants, and should be independent of the 
program under review. Individuals selected for augmen- 
tation of audit teams will be appropriately cleared with 
the Deputy Director concerned. 

This technique has seldom been utilized in the past when an expanded 
audit was undertaken. If a Deputy Director believes that an expanded 
audit would benefit from the assistance of technical expert(s), he 
should so recommend to the Chief, Audit Staff. The technical expert 
will act as an adviser to the auditors. Accordingly, his views and 
opinions of course :cannot be imposed on the auditors and the auditors 
have the right to deliberate independently. 


12. In addition, the Deputy Director concerned may appoint a person 
from his staff— not from the component being audited/ inspected-- to assist 
the audit team as necessary, and whose relationship will be subject to 
the same guidelines as the technical expert. 


13. Other possibilities include that of having the Inspection Staff 
conduct surveys or inspections in conjunction with the auditors, by 
assigning an inspector to the more important audits. In these cases, the 
audit teams and the inspector would work together in a Headquarters 
component, or at a field installation or on a program review/audit. 
Alternatively, auditors may be assigned to inspection teams, especially 
where financial considerations are important. These combinations of auditors 
and inspectors should be able to respond to the somewhat overlapping require- 
ments of both audits and inspections. Over the coming months it is expected 
that these and other proposals will be tested out, refined, and improved. 


14 The above is intended to be a discussion of the auditors role 
and the relationship between Audit and Inspection Staffs but in no way 
modifies or alters existing relevant regulations. 


Attachment: 
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ADMmiSTRATIVE— INTERNAL USE ONLY 

AUDIT ; j. 


1. AUDIT OF AGENCY ACTIVITIES - - 

a. POLICY. The Agency will provide audit facilities and services to ensure a 
final and independent audit or audit review of components, installations, 
programs, and activities consistent with audit standards and requirements 
promulgated by authoritative audit and management offices of the Govern- 
ment, and with the guidelines ■ set forth by the Director of Central Intelli- 
gence. Only the Director of Central Intelligence may exempt an Agency 
activity from audit. 


b. RESPONSIBILITIES 

(1) The Audit Staff of the Office of the Inspector General is responsible 

for the examination and appraisal of policies, systems, procedures, records, 
and reports relating to programming, budgeting, accounting, procure- 
ment, and supply; and, other operations having an impact, on the ex- 
penditure of funds, use of resources, or effective accomplishment of 
Agency objectives.' • 

(2) The Chief, Audit Staff will: / 

(a) Prepare an annual audit plan developed in coordination with pro- 
gram officials. The plan will cover all Agency activities subject to 
audit, the activities and locations selected for audit with assigned 
priorities; the reasons for their selection, the audit period, the scope of 
audit coverage, the management benefits anticipated from the audit, 
and evidence of coordination with the Comptroller or the appropriate 
Deputy Director on the selection of subject matter for management 

. . audits. 

(b) Direct t he performan ce of planned audits of headquarters com- 
ponents, | overseas field Installations, and related pro- 

grams ana projects, dependent on the scope of audit coverage outlined 
in the audit plan, determine whether: 

(1) Financial operations are properly conducted, financial reports 
are presented fairly, and compliance with laws and regulations 
has been achieved. 

( 2 ) Agency resources are managed and used in an economical and 
efficient manner. 

( 3 ) Desired results and objectives are being- achieved in an effective 
manner. 


(c) When an audit is planned which encompasses elements of sub- 
paragraph b (2) (b) (2) and/or ( 3 ) above, augment the audit team 
where necessary with an individual or individuals with appropriate 
experience in the technical field or operational area to be reviewed. 
These individuals may be drawn from either the Inspection Staff, the 
directorate involved, retirees, or outside consultants, and should be 
independent of the program under review. Individuals selected for 
augmentation of audit teams will be appropriately cleared with the 
Deputy Director concerned. 


(d) Report the observations and recommendations resulting from audits 
to Agency officials responsible for taking actions, and to other 
responsible or management officials as may be appropriate. 

(e) Follow up recommendations when necessary to assure that appro- 
priate action Is taken, and report to the Director of Central Intelli- 
gence through the Inspector General any recommendations that 
are not being resolved satisfactorily at operating levels. 


-►Revised: 3 June 1975 .(882)- 
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